Cannabis.357 Virus
Virus Name: Cannabis.357
Aliases:
V Status: New
Discovery: January, 1996
Symptoms: .COM file growth; message displayed
Origin: Unknown
Eff Length: 357 Bytes
Type Code: PNCK - Parasitic Non-Resident .COM Infector
Detection Method: ChAV, F-Prot, AVTK, IBMAV, NAV, NAVDX, ViruScan 2.54+,
Innoc, AVTK/N, IBMAV/N, NAV/N, NShld
Removal Instructions: Delete infected files
General Comments:
The Cannabis.357 virus was received in January, 1996. Its origin
or point of isolation is unknown. It is a non-resident, direct
action infector of .COM files, including COMMAND.COM.
When a program infected with the Cannabis.357 virus is executed,
this virus will infect the first .COM file in the current directory,
regardless of whether it was previously infected by this virus.
As a result, multiple infections of the virus may be present on
the file. Once the virus has infected the file, it will display
the following message on the system monitor:
"LEGALIZE CANNABIS!!"
Programs infected with the Cannabis.357 virus will have a file
length increase of 357 bytes for each infection of the virus
present on the file. The virus will be located at the beginning
of the file. The program's date and time in the DOS disk directory
listing will not be altered. The following text strings are visible
within the viral code:
"LEGALIZE CANNABIS!!"
"*.COM"
"This Program is too stoned to operate correctly"